COMPLETE LISTING OF CLAIMS IN THE CASE 
Please withdraw Claims 22-28 and amend Claims 1, 8, 10, 16, 17 and 18 as 
follows: 



1. (Currently Amended) A method of ensuring the security of software in a 
computer system, comprising: 

loading said software on said computer system; 
validating said software by the use of a validator program; 
marking said software as valid or invalid by the use of a digital signature 
flag; and, 

denying access of said software the ability to access said computer 
system if said validator fails to identify said software as valid in order to ensure 
the security of said computer system . 

2. (Original) The method described in Claim 1 wherein said method operates 
on an open platform computer system. 

3. (Original) The method described in Claim 1 wherein said method 
operates on a computer system which comprises: 

a host computer; and 

a portable computing device coupled to said host computer. 

4. (Original) The method described in Claim 1 wherein said software is 
supplied by a third-party source. 

5. (Original) The method described in Claim 4 wherein said third-party 
software is for execution or other use on a palmtop computer. 

6. (Original) The method described in Claim 1 wherein said validator 
program is specially constructed to reside in a secure fashion in said computer 
system. 

7. (Original) The method described in Claim 1 wherein said method 
operates on a computer system which comprises: 

a host computer; and 
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a palmtop computing device coupled to said host computer. 



8. (Currently Amended) An apparatus for ensuring the security of software 
m a computer system, comprising: 

a host computer; and 

a portable computing device coupled to said a^host computer , wherein 
said portable computing device is capable of loading software from said host 
computer to said portable computing device; and, 

a validation program that is capable of 
validating said software; 

marking said software as valid or invalid by the use of a 
digital signature flag; and, 

denying said software the ability to access said computer 
system if said validator fails to identify said software as valid in 
order to ensure the security of said computer system. 

9. (Original) The apparatus described in Claim 8 wherein said host computer 
is coupled to a network. 

10. (Currently Amended) The apparatus described in Claim 8 wherein said 
portable computing device is a palmtop handheld computing device. 

11. (Original) The apparatus described in Claim 8 wherein said portable 
computing device is a personal data assistant. 

12. (Original) The apparatus described in Claim 8 wherein said portable 
computing device is coupled to said host computer by an infrared device. 

13. (original) The apparatus described in Claim 8 wherein said portable 
computing device is coupled to said host computer by an RF enabled device 

14. (Original) The apparatus described in Claim 8 wherein said validation 
program resides in said host computer in a fashion intended to be secure. 

15. (Original) The apparatus described in Claim 8 wherein said validation 
program is configured to evaluate third-party software and attach a digital 
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"valid" flag if said third-party software is found to be clean of known security 
compromising routines or attach a digital "invalid" flag to said third-party 
software in said third-party software is not found to be clean of known security 
compromising routines. 

16. (Currently Amended) The apparatus described in Claim 15 wherein said 
palmtop portable computing device is configured to load third-party software 
files with said digital "valid" flag attached and to refrain from loading third-party 
software files which have no flag attached or have said "invalid" flag attached.. 

17. (Currently Amended) The apparatus described in Claim 15 wherein said 
palmtop portable computing device is a Personal Data Assistant. 

18. (Currently Amended) An apparatus for ensuring the security of software 
» a computer system, comprising: 

a network; and 

a palmtop handheld computing device coupled to said a network , wherein 
said handheld computing device is capable of loading software from said 
network to said handheld computing device ; and, 

a validation program that is capable of 
validating said software; 

marking said software as valid or invalid by the use of a 
di gital signature flag; and, 

denying said software the ability to access said computer 
system if said validator fails to identify said software as valid in 
order to ensure the security of said computer system. 

19. (Original) The apparatus described in Claim 18 wherein said validation 
program resides in said computer network in a fashion intended to be secure. 

20. (Original) The apparatus described in Claim 18, wherein said palmtop 
computing device is configured to load third-party software files with said digital 
"valid" flag attached and to refrain from loading third-party software files which 
have no flag attached or have said "invalid" flag attached. 
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21. (Original) The apparatus described in Claim 18 wherein said validation 
program is configured to evaluate third-party software and attach a digital 
"valid" flag if said third-party software is found to be clean of known security 
compromising routines or attach a digital "invalid" flag to said third-party 
software in said third-party software is not found to be clean of known security 
compromising routines. 

22. (Withdrawn) A portable computing device, comprising: 
a bus; 

a processor coupled to said bus; 
volatile RAM coupled to said bus; 
non-volatile ROM coupled to said bus; 
a data storage device coupled to said bud; 

an operating system, capable of storage on said data storage device or 
said non-volatile ROM or both and capable of special configuration; 
a display coupled to said bus; 

an alpha-numeric input device coupled to said bus; and, 
a cursor control device coupled to said bus; 

all of which are capable of operating under the control of said operating 
system software or firmware. 

23. (Withdrawn) The portable computing device described in Claim 22 
wherein said portable computing device is a palmtop computing device. 

24. (Withdrawn) The portable computing device described in Claim 22 
wherein said portable computing device is a personal data assistant. 

25. (Withdrawn) The portable computing device described in Claim 22 
wherein said portable computing device is capable of coupling with a host 
computer. 

26. (Withdrawn) The portable computing device described in Claim 22 
wherein said operating system is configured to load third-party applications and 
other files if said applications and other files are flagged by a validation program 
as being clean of security compromising routines. 
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27. (Withdrawn) The portable computing device described in Claim 25 
wherein said coupling is enabled by an infrared device. 

28. (Withdrawn) The portable computing device described in Claim 25 
wherein said coupling is enabled by an RF device. 
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